Question 1

What are the categories of risk treatment?

Options :

A : Risk avoidance, risk transfer, risk mitigation, and risk acceptance

B : Risk avoidance, risk treatment, risk mitigation, and risk acceptance

C : Risk avoidance, risk reduction, risk transfer, risk mitigation, and risk acceptance

D : Risk avoidance, risk transfer, and risk mitigation

Answer: B

Question 2

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Options :

A : For the purpose of medical research

B : A forthcoming campaign to win back customers

C : A required retention period due to regulations

D : Ease of onboarding when the customer returns

Answer: C

Question 3

An organization performs annual true-ups of its data inventory and finds numerous discrepancies. What change should be undertaken toreduce or eliminate these discrepancies?

Options :

A : Increase the frequency of data inventory.

B : Automate the data inventory with daily scans.

C : Incorporate data inventory updates into the change management process.

D : Implement dynamic DLP.

Answer: B

Question 4

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is thefirst step that an online social media vendor should take?

Options :

A : Wait until there is sufficient case law to see whether the law is enforceable.

B : Wait until the law takes effect to begin making changes to systems.

C : Retain expert privacy counsel to opine on applicability and interpretation.

D : Direct developers to make changes to the system to comply with the new law.

Answer: C

Question 5

Program responsibilities over the activities of managing data subject requests lie with:

Options :

A : The chief privacy officer

B : The chief marketing officer

C : Customer support

D : The chief information security officer

Answer: A

Confidently Practice Online with Free CDPSE Exam Cram

Buying Options: